Skip to main content

Windows 10 1511

2 CVEs product

Monthly

CVE-2017-0147 Mar 17, 00:59 HIGH POC KEV PATCH THREAT Act Now

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Information Disclosure Microsoft Siemens Windows 10 1507 Windows 10 1607 +16
NVD Exploit-DB
CVSS 3.1
7.5
EPSS
92.4%
Threat
7.3
CVE-2016-7255 Nov 10, 07:00 HIGH POC KEV PATCH THREAT Act Now

The Win32k kernel-mode driver in Windows Vista through Windows Server 2016 allows local privilege escalation, exploited alongside CVE-2016-7256 in targeted attacks attributed to the Strontium (APT28/Fancy Bear) group.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows Server 2008 +7
NVD GitHub Exploit-DB VulDB
CVSS 3.1
7.8
EPSS
89.4%
Threat
9.2
EPSS 92% 7.3 CVSS 7.5
HIGH POC KEV PATCH THREAT Act Now

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Information Disclosure Microsoft Siemens +18
NVD Exploit-DB
EPSS 89% 9.2 CVSS 7.8
HIGH POC KEV PATCH THREAT Act Now

The Win32k kernel-mode driver in Windows Vista through Windows Server 2016 allows local privilege escalation, exploited alongside CVE-2016-7256 in targeted attacks attributed to the Strontium (APT28/Fancy Bear) group.

Information Disclosure Microsoft Windows 10 1507 +9
NVD GitHub Exploit-DB VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy